CVE-2021-32265: Axiosys BENTO4

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in Bento4 through v1.6.0-637. A global-buffer-overflow exists in the function AP4_MemoryByteStream::WritePartial() located in Ap4ByteStream.cpp. It allows an attacker to cause code execution or information disclosure.

Affected products

• Axiosys BENTO4: up to and including 1.6.0-637

Published 2021-09-20. Last modified 2026-06-17.